[syslog-ng]syslog and -HUP
Andy
syslog-ng@lists.balabit.hu
Mon, 25 Apr 2005 18:07:32 +0300
Hello Balazs Scheidler!
On Fri, Apr 22, 2005 at 01:55:44PM +0200, Balazs Scheidler wrote:
> On Fri, 2005-04-22 at 12:58 +0300, Andy wrote:
> > Hello Balazs Scheidler!
> > > > .........
> > > > poll([{fd=3D7, events=3D0}, {fd=3D8, events=3D0}, {fd=3D6, events=
=3D0}, {fd=3D5, events=3DPOLLIN, revents=3DPOLLIN}, {fd=3D3, events=3DPOLLI=
N}, {fd=3D12, events=3DPOLLIN}, {fd=3D11, events=3DPOLLIN}, {fd=3D4, events=
=3DPOLLIN}], 8, 241000) =3D 1
> > > > accept(5, {sin_family=3DAF_UNIX, path=3D@}, [2]) =3D 9
> > > [snip[
> > > > ..............
> > >=20
> > > As I see your test message was written to fd 8 while all kernel messa=
ges
> > > are written to fd 6. You'll need to check out what those fds are in
> > > reality.
> >=20
> > May be you explain how I can do this?=20
>=20
> lsof -p <syslog-ng-pid>
Ok, it's my investigation:
# echo test|logger -p local2.info -t logger
During same time:
strace -p <pid_of_syslog-ng>:
=2E....
poll([{fd=3D56, events=3DPOLLIN}, {fd=3D51, events=3DPOLLIN}, {fd=3D43, eve=
nts=3DPOLLIN}, {fd=3D55, events=3DPOLLIN}, {fd=3D54, events=3DPOLLIN}, {fd=
=3D101, events=3DPOLLIN}, {fd=3D100, events=3DPOLLIN}, {fd=3D58, events=3DP=
OLLIN}, {fd=3D57, events=3DPOLLIN}, {fd=3D93, events=3DPOLLIN}, {fd=3D108, =
events=3DPOLLIN}, {fd=3D105, events=3DPOLLIN}, {fd=3D104, events=3DPOLLIN},=
{fd=3D78, events=3DPOLLIN}, {fd=3D77, events=3DPOLLIN}, {fd=3D98, events=
=3DPOLLIN}, {fd=3D33, events=3DPOLLIN}, {fd=3D32, events=3DPOLLIN}, {fd=3D9=
4, events=3DPOLLIN}, {fd=3D38, events=3DPOLLIN}, {fd=3D23, events=3DPOLLIN}=
, {fd=3D97, events=3DPOLLIN}, {fd=3D63, events=3DPOLLIN}, {fd=3D59, events=
=3DPOLLIN}, {fd=3D50, events=3DPOLLIN}, {fd=3D45, events=3DPOLLIN}, {fd=3D1=
7, events=3DPOLLIN}, {fd=3D14, events=3DPOLLIN}, {fd=3D109, events=3D0}, {f=
d=3D44, events=3DPOLLIN}, {fd=3D92, events=3DPOLLIN}, {fd=3D91, events=3DPO=
LLIN}, {fd=3D60, events=3DPOLLIN}, {fd=3D36, events=3DPOLLIN}, {fd=3D107, e=
vents=3DPOLLIN}, {fd=3D106, events=3DPOLLIN}, {fd=3D7, events=3DPOLLIN}, {f=
d=3D6, events=3DPOLLIN}, {fd=3D29, events=3DPOLLIN}, {fd=3D28, events=3DPOL=
LIN}, {fd=3D15, events=3DPOLLIN}, {fd=3D12, events=3DPOLLIN}, {fd=3D27, eve=
nts=3DPOLLIN}, {fd=3D26, events=3DPOLLIN}, {fd=3D10, events=3DPOLLIN}, {fd=
=3D9, events=3DPOLLIN}, {fd=3D11, events=3DPOLLIN}, {fd=3D8, events=3DPOLLI=
N}, {fd=3D103, events=3DPOLLIN}, {fd=3D102, events=3DPOLLIN}, {fd=3D99, eve=
nts=3D0}, {fd=3D37, events=3DPOLLIN}, {fd=3D31, events=3DPOLLIN}, {fd=3D88,=
events=3DPOLLIN}, {fd=3D69, events=3DPOLLIN}, {fd=3D13, events=3D0}, {fd=
=3D22, events=3D0}, {fd=3D4, events=3D0}, {fd=3D5, events=3DPOLLIN, revents=
=3DPOLLIN}, {fd=3D3, events=3DPOLLIN}, {fd=3D75, events=3DPOLLIN}, {fd=3D70=
, events=3DPOLLIN}, {fd=3D21, events=3DPOLLIN}, {fd=3D16, events=3DPOLLIN},=
{fd=3D96, events=3DPOLLIN}, {fd=3D95, events=3DPOLLIN}, {fd=3D87, events=
=3DPOLLIN}, {fd=3D76, events=3DPOLLIN}, {fd=3D65, events=3DPOLLIN}, {fd=3D6=
4, events=3DPOLLIN}, {fd=3D47, events=3DPOLLIN}, {fd=3D46, events=3DPOLLIN}=
, {fd=3D39, events=3DPOLLIN}, {fd=3D74, events=3DPOLLIN}, {fd=3D72, events=
=3DPOLLIN}, {fd=3D71, events=3DPOLLIN}, {fd=3D62, events=3DPOLLIN}, {fd=3D6=
1, events=3DPOLLIN}, {fd=3D90, events=3DPOLLIN}, {fd=3D89, events=3DPOLLIN}=
, {fd=3D86, events=3DPOLLIN}, {fd=3D85, events=3DPOLLIN}, {fd=3D84, events=
=3DPOLLIN}, {fd=3D83, events=3DPOLLIN}, {fd=3D80, events=3DPOLLIN}, {fd=3D7=
9, events=3DPOLLIN}, {fd=3D68, events=3DPOLLIN}, {fd=3D67, events=3DPOLLIN}=
, {fd=3D20, events=3DPOLLIN}, {fd=3D19, events=3DPOLLIN}, {fd=3D82, events=
=3DPOLLIN}, {fd=3D81, events=3DPOLLIN}, {fd=3D25, events=3DPOLLIN}, {fd=3D2=
4, events=3DPOLLIN}, {fd=3D73, events=3DPOLLIN}, {fd=3D66, events=3DPOLLIN}=
, {fd=3D53, events=3DPOLLIN}, {fd=3D52, events=3DPOLLIN}, {fd=3D49, events=
=3DPOLLIN}, {fd=3D48, events=3DPOLLIN}, {fd=3D35, events=3DPOLLIN}, {fd=3D3=
4, events=3DPOLLIN}, {fd=3D42, events=3DPOLLIN}, {fd=3D41, events=3DPOLLIN}=
, {fd=3D40, events=3DPOLLIN}, {fd=3D30, events=3DPOLLIN}, {fd=3D18, events=
=3DPOLLIN}], 107, 147000) =3D 1
accept(5, {sin_family=3DAF_UNIX, path=3D@}, [2]) =3D 110
fcntl64(0x6e, 0x3, 0x50, 0x6e) =3D 2
fcntl64(0x6e, 0x4, 0x802, 0x6e) =3D 0
fcntl64(0x6e, 0x2, 0x1, 0x6e) =3D 0
getpid() =3D 4464
time(NULL) =3D 1114441203
time(NULL) =3D 1114441203
poll([{fd=3D110, events=3D0, revents=3DPOLLHUP}, {fd=3D56, events=3DPOLLIN}=
, {fd=3D51, events=3DPOLLIN}, {fd=3D43, events=3DPOLLIN}, {fd=3D55, events=
=3DPOLLIN}, {fd=3D54, events=3DPOLLIN}, {fd=3D101, events=3DPOLLIN}, {fd=3D=
100, events=3DPOLLIN}, {fd=3D58, events=3DPOLLIN}, {fd=3D57, events=3DPOLLI=
N}, {fd=3D93, events=3DPOLLIN}, {fd=3D108, events=3DPOLLIN}, {fd=3D105, eve=
nts=3DPOLLIN}, {fd=3D104, events=3DPOLLIN}, {fd=3D78, events=3DPOLLIN}, {fd=
=3D77, events=3DPOLLIN}, {fd=3D98, events=3DPOLLIN}, {fd=3D33, events=3DPOL=
LIN}, {fd=3D32, events=3DPOLLIN}, {fd=3D94, events=3DPOLLIN}, {fd=3D38, eve=
nts=3DPOLLIN}, {fd=3D23, events=3DPOLLIN}, {fd=3D97, events=3DPOLLIN}, {fd=
=3D63, events=3DPOLLIN}, {fd=3D59, events=3DPOLLIN}, {fd=3D50, events=3DPOL=
LIN}, {fd=3D45, events=3DPOLLIN}, {fd=3D17, events=3DPOLLIN}, {fd=3D14, eve=
nts=3DPOLLIN}, {fd=3D109, events=3D0}, {fd=3D44, events=3DPOLLIN}, {fd=3D92=
, events=3DPOLLIN}, {fd=3D91, events=3DPOLLIN}, {fd=3D60, events=3DPOLLIN},=
{fd=3D36, events=3DPOLLIN}, {fd=3D107, events=3DPOLLIN}, {fd=3D106, events=
=3DPOLLIN}, {fd=3D7, events=3DPOLLIN}, {fd=3D6, events=3DPOLLIN}, {fd=3D29,=
events=3DPOLLIN}, {fd=3D28, events=3DPOLLIN}, {fd=3D15, events=3DPOLLIN}, =
{fd=3D12, events=3DPOLLIN}, {fd=3D27, events=3DPOLLIN}, {fd=3D26, events=3D=
POLLIN}, {fd=3D10, events=3DPOLLIN}, {fd=3D9, events=3DPOLLIN}, {fd=3D11, e=
vents=3DPOLLIN}, {fd=3D8, events=3DPOLLIN}, {fd=3D103, events=3DPOLLIN}, {f=
d=3D102, events=3DPOLLIN}, {fd=3D99, events=3D0}, {fd=3D37, events=3DPOLLIN=
}, {fd=3D31, events=3DPOLLIN}, {fd=3D88, events=3DPOLLIN}, {fd=3D69, events=
=3DPOLLIN}, {fd=3D13, events=3D0}, {fd=3D22, events=3D0}, {fd=3D4, events=
=3D0}, {fd=3D5, events=3DPOLLIN}, {fd=3D3, events=3DPOLLIN}, {fd=3D75, even=
ts=3DPOLLIN}, {fd=3D70, events=3DPOLLIN}, {fd=3D21, events=3DPOLLIN}, {fd=
=3D16, events=3DPOLLIN}, {fd=3D96, events=3DPOLLIN}, {fd=3D95, events=3DPOL=
LIN}, {fd=3D87, events=3DPOLLIN}, {fd=3D76, events=3DPOLLIN}, {fd=3D65, eve=
nts=3DPOLLIN}, {fd=3D64, events=3DPOLLIN}, {fd=3D47, events=3DPOLLIN}, {fd=
=3D46, events=3DPOLLIN}, {fd=3D39, events=3DPOLLIN}, {fd=3D74, events=3DPOL=
LIN}, {fd=3D72, events=3DPOLLIN}, {fd=3D71, events=3DPOLLIN}, {fd=3D62, eve=
nts=3DPOLLIN}, {fd=3D61, events=3DPOLLIN}, {fd=3D90, events=3DPOLLIN}, {fd=
=3D89, events=3DPOLLIN}, {fd=3D86, events=3DPOLLIN}, {fd=3D85, events=3DPOL=
LIN}, {fd=3D84, events=3DPOLLIN}, {fd=3D83, events=3DPOLLIN}, {fd=3D80, eve=
nts=3DPOLLIN}, {fd=3D79, events=3DPOLLIN}, {fd=3D68, events=3DPOLLIN}, {fd=
=3D67, events=3DPOLLIN}, {fd=3D20, events=3DPOLLIN}, {fd=3D19, events=3DPOL=
LIN}, {fd=3D82, events=3DPOLLIN}, {fd=3D81, events=3DPOLLIN}, {fd=3D25, eve=
nts=3DPOLLIN}, {fd=3D24, events=3DPOLLIN}, {fd=3D73, events=3DPOLLIN}, {fd=
=3D66, events=3DPOLLIN}, {fd=3D53, events=3DPOLLIN}, {fd=3D52, events=3DPOL=
LIN}, {fd=3D49, events=3DPOLLIN}, {fd=3D48, events=3DPOLLIN}, {fd=3D35, eve=
nts=3DPOLLIN}, {fd=3D34, events=3DPOLLIN}, {fd=3D42, events=3DPOLLIN}, {fd=
=3D41, events=3DPOLLIN}, {fd=3D40, events=3DPOLLIN}, {fd=3D30, events=3DPOL=
LIN}, {fd=3D18, events=3DPOLLIN}], 108, 100) =3D 1
time(NULL) =3D 1114441203
close(110) =3D 0
poll([{fd=3D56, events=3DPOLLIN}, {fd=3D51, events=3DPOLLIN}, {fd=3D43, eve=
nts=3DPOLLIN}, {fd=3D55, events=3DPOLLIN}, {fd=3D54, events=3DPOLLIN}, {fd=
=3D101, events=3DPOLLIN}, {fd=3D100, events=3DPOLLIN}, {fd=3D58, events=3DP=
OLLIN}, {fd=3D57, events=3DPOLLIN}, {fd=3D93, events=3DPOLLIN}, {fd=3D108, =
events=3DPOLLIN}, {fd=3D105, events=3DPOLLIN}, {fd=3D104, events=3DPOLLIN},=
{fd=3D78, events=3DPOLLIN}, {fd=3D77, events=3DPOLLIN}, {fd=3D98, events=
=3DPOLLIN}, {fd=3D33, events=3DPOLLIN}, {fd=3D32, events=3DPOLLIN}, {fd=3D9=
4, events=3DPOLLIN}, {fd=3D38, events=3DPOLLIN}, {fd=3D23, events=3DPOLLIN}=
, {fd=3D97, events=3DPOLLIN}, {fd=3D63, events=3DPOLLIN}, {fd=3D59, events=
=3DPOLLIN}, {fd=3D50, events=3DPOLLIN}, {fd=3D45, events=3DPOLLIN}, {fd=3D1=
7, events=3DPOLLIN}, {fd=3D14, events=3DPOLLIN}, {fd=3D109, events=3D0}, {f=
d=3D44, events=3DPOLLIN}, {fd=3D92, events=3DPOLLIN}, {fd=3D91, events=3DPO=
LLIN}, {fd=3D60, events=3DPOLLIN}, {fd=3D36, events=3DPOLLIN}, {fd=3D107, e=
vents=3DPOLLIN}, {fd=3D106, events=3DPOLLIN}, {fd=3D7, events=3DPOLLIN}, {f=
d=3D6, events=3DPOLLIN}, {fd=3D29, events=3DPOLLIN}, {fd=3D28, events=3DPOL=
LIN}, {fd=3D15, events=3DPOLLIN}, {fd=3D12, events=3DPOLLIN}, {fd=3D27, eve=
nts=3DPOLLIN}, {fd=3D26, events=3DPOLLIN}, {fd=3D10, events=3DPOLLIN}, {fd=
=3D9, events=3DPOLLIN}, {fd=3D11, events=3DPOLLIN}, {fd=3D8, events=3DPOLLI=
N}, {fd=3D103, events=3DPOLLIN}, {fd=3D102, events=3DPOLLIN}, {fd=3D99, eve=
nts=3D0}, {fd=3D37, events=3DPOLLIN}, {fd=3D31, events=3DPOLLIN}, {fd=3D88,=
events=3DPOLLIN}, {fd=3D69, events=3DPOLLIN}, {fd=3D13, events=3D0}, {fd=
=3D22, events=3D0}, {fd=3D4, events=3D0}, {fd=3D5, events=3DPOLLIN}, {fd=3D=
3, events=3DPOLLIN}, {fd=3D75, events=3DPOLLIN}, {fd=3D70, events=3DPOLLIN}=
, {fd=3D21, events=3DPOLLIN}, {fd=3D16, events=3DPOLLIN}, {fd=3D96, events=
=3DPOLLIN}, {fd=3D95, events=3DPOLLIN}, {fd=3D87, events=3DPOLLIN}, {fd=3D7=
6, events=3DPOLLIN}, {fd=3D65, events=3DPOLLIN}, {fd=3D64, events=3DPOLLIN}=
, {fd=3D47, events=3DPOLLIN}, {fd=3D46, events=3DPOLLIN}, {fd=3D39, events=
=3DPOLLIN}, {fd=3D74, events=3DPOLLIN}, {fd=3D72, events=3DPOLLIN}, {fd=3D7=
1, events=3DPOLLIN}, {fd=3D62, events=3DPOLLIN}, {fd=3D61, events=3DPOLLIN}=
, {fd=3D90, events=3DPOLLIN}, {fd=3D89, events=3DPOLLIN}, {fd=3D86, events=
=3DPOLLIN}, {fd=3D85, events=3DPOLLIN}, {fd=3D84, events=3DPOLLIN}, {fd=3D8=
3, events=3DPOLLIN}, {fd=3D80, events=3DPOLLIN}, {fd=3D79, events=3DPOLLIN}=
, {fd=3D68, events=3DPOLLIN}, {fd=3D67, events=3DPOLLIN}, {fd=3D20, events=
=3DPOLLIN}, {fd=3D19, events=3DPOLLIN}, {fd=3D82, events=3DPOLLIN}, {fd=3D8=
1, events=3DPOLLIN}, {fd=3D25, events=3DPOLLIN}, {fd=3D24, events=3DPOLLIN}=
, {fd=3D73, events=3DPOLLIN}, {fd=3D66, events=3DPOLLIN}, {fd=3D53, events=
=3DPOLLIN}, {fd=3D52, events=3DPOLLIN}, {fd=3D49, events=3DPOLLIN}, {fd=3D4=
8, events=3DPOLLIN}, {fd=3D35, events=3DPOLLIN}, {fd=3D34, events=3DPOLLIN}=
, {fd=3D42, events=3DPOLLIN}, {fd=3D41, events=3DPOLLIN}, {fd=3D40, events=
=3DPOLLIN}, {fd=3D30, events=3DPOLLIN}, {fd=3D18, events=3DPOLLIN}], 107, 1=
00) =3D 0
poll(
=2E....
# lsof -p <pid_of_syslog-ng>:
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
syslog-ng 4464 root cwd DIR 3,7 4096 3254644 /home/andy
syslog-ng 4464 root rtd DIR 3,3 4096 2 /
syslog-ng 4464 root txt REG 3,3 111432 114039 /sbin/syslog-ng
syslog-ng 4464 root mem REG 3,3 85420 16422 /lib/ld-2.2.5.so
syslog-ng 4464 root mem REG 3,3 85262 16443 /lib/libnsl-2.2.=
5.so
syslog-ng 4464 root mem REG 3,3 64733 17484 /lib/libresolv-2=
.2.5.so
syslog-ng 4464 root mem REG 3,3 1344152 16435 /lib/libc-2.2.5.=
so
syslog-ng 4464 root 0u CHR 1,3 69279 /dev/null
syslog-ng 4464 root 1u CHR 1,3 69279 /dev/null
syslog-ng 4464 root 2u CHR 1,3 69279 /dev/null
syslog-ng 4464 root 3r REG 0,6 0 4110 /proc/kmsg
syslog-ng 4464 root 4w REG 3,5 595 48927 /var/log/maillog
syslog-ng 4464 root 5u unix 0xc6e963c0 301272 /dev/log
syslog-ng 4464 root 6u unix 0xcc9c4800 348060 /dev/log
syslog-ng 4464 root 7u unix 0xc30c80c0 348069 /dev/log
syslog-ng 4464 root 8u unix 0xc243d500 329073 /dev/log
syslog-ng 4464 root 9u unix 0xcc16db00 330663 /dev/log
syslog-ng 4464 root 10u unix 0xc7229040 330672 /dev/log
syslog-ng 4464 root 11u unix 0xc9b7f400 329082 /dev/log
syslog-ng 4464 root 12u unix 0xc4d4d8c0 332938 /dev/log
syslog-ng 4464 root 13w REG 3,5 136973 48951 /var/log/iptables
syslog-ng 4464 root 14u unix 0xce603140 370254 /dev/log
syslog-ng 4464 root 15u unix 0xce29e880 332947 /dev/log
syslog-ng 4464 root 16u unix 0xc9a0d540 286964 /dev/log
syslog-ng 4464 root 17u unix 0xc764a480 370263 /dev/log
syslog-ng 4464 root 18u unix 0xcbdde140 32218 /dev/log
syslog-ng 4464 root 19u unix 0xc8eff740 118382 /dev/log
syslog-ng 4464 root 20u unix 0xc5756880 118391 /dev/log
syslog-ng 4464 root 21u unix 0xc4311440 286973 /dev/log
syslog-ng 4464 root 22w REG 3,5 1097825 48901 /var/log/vpn.log
-> I waiting log message in vpn.log
syslog-ng 4464 root 23u unix 0xc4fa9180 378812 /dev/log
syslog-ng 4464 root 24u unix 0xc8bab800 58402 /dev/log
syslog-ng 4464 root 25u unix 0xc90acb40 58411 /dev/log
syslog-ng 4464 root 26u unix 0xc764a800 332105 /dev/log
syslog-ng 4464 root 27u unix 0xc19d5080 332114 /dev/log
syslog-ng 4464 root 28u unix 0xc6adc740 339999 /dev/log
syslog-ng 4464 root 29u unix 0xcdecdc00 340008 /dev/log
syslog-ng 4464 root 30u unix 0xc9e3d740 33937 /dev/log
syslog-ng 4464 root 31u unix 0xc878db40 323653 /dev/log
syslog-ng 4464 root 32u unix 0xcc5c7ac0 391279 /dev/log
syslog-ng 4464 root 33u unix 0xcf193b00 391288 /dev/log
syslog-ng 4464 root 34u unix 0xc243d880 37586 /dev/log
syslog-ng 4464 root 35u unix 0xc4db9c40 37595 /dev/log
syslog-ng 4464 root 36u unix 0xc628b540 357236 /dev/log
syslog-ng 4464 root 37u unix 0xc3a1b180 323696 /dev/log
syslog-ng 4464 root 38u unix 0xc382b440 378821 /dev/log
syslog-ng 4464 root 39u unix 0xcfed6b00 187277 /dev/log
syslog-ng 4464 root 40u unix 0xcdd51bc0 35201 /dev/log
syslog-ng 4464 root 41u unix 0xcc1da740 35210 /dev/log
syslog-ng 4464 root 42u unix 0xc74bbb00 35804 /dev/log
syslog-ng 4464 root 43u unix 0xc30c8440 419599 /dev/log
syslog-ng 4464 root 44u unix 0xc9225bc0 361515 /dev/log
syslog-ng 4464 root 45u unix 0xc2162040 371790 /dev/log
syslog-ng 4464 root 46u unix 0xcdecd500 241761 /dev/log
syslog-ng 4464 root 47u unix 0xc9b7f780 241770 /dev/log
syslog-ng 4464 root 48u unix 0xcd52bbc0 39447 /dev/log
syslog-ng 4464 root 49u unix 0xc1683b40 39456 /dev/log
syslog-ng 4464 root 50u unix 0xcb7b6c40 371799 /dev/log
syslog-ng 4464 root 51u unix 0xc8b078c0 419608 /dev/log
syslog-ng 4464 root 52u unix 0xc2536440 48708 /dev/log
syslog-ng 4464 root 53u unix 0xc41de180 48717 /dev/log
syslog-ng 4464 root 54u unix 0xc7edb740 419477 /dev/log
syslog-ng 4464 root 55u unix 0xc628bc40 419486 /dev/log
syslog-ng 4464 root 56u unix 0xcc40fc00 419833 /dev/log
syslog-ng 4464 root 57u unix 0xc8eff3c0 413883 /dev/log
syslog-ng 4464 root 58u unix 0xcb7b61c0 413893 /dev/log
syslog-ng 4464 root 59u unix 0xcedce540 374898 /dev/log
syslog-ng 4464 root 60u unix 0xc3120bc0 357256 /dev/log
syslog-ng 4464 root 61u unix 0xc5bd7b80 130377 /dev/log
syslog-ng 4464 root 62u unix 0xc9d3b840 130386 /dev/log
syslog-ng 4464 root 63u unix 0xc5b5c440 374907 /dev/log
syslog-ng 4464 root 64u unix 0xcccbe880 282284 /dev/log
syslog-ng 4464 root 65u unix 0xc415f540 282293 /dev/log
syslog-ng 4464 root 66u unix 0xc742a180 49614 /dev/log
syslog-ng 4464 root 67u unix 0xcdd99180 118430 /dev/log
syslog-ng 4464 root 68u unix 0xc27551c0 118439 /dev/log
syslog-ng 4464 root 69u unix 0xc6e96040 319187 /dev/log
syslog-ng 4464 root 70u unix 0xcbb6e3c0 291698 /dev/log
syslog-ng 4464 root 71u unix 0xcbb6e740 150605 /dev/log
syslog-ng 4464 root 72u unix 0xcd201780 150614 /dev/log
syslog-ng 4464 root 73u unix 0xc2772800 49623 /dev/log
syslog-ng 4464 root 74u unix 0xc8838400 157202 /dev/log
syslog-ng 4464 root 75u unix 0xc5579180 291718 /dev/log
syslog-ng 4464 root 76u unix 0xc2241100 282484 /dev/log
syslog-ng 4464 root 77u unix 0xc21acc00 400967 /dev/log
syslog-ng 4464 root 78u unix 0xcab19440 400976 /dev/log
syslog-ng 4464 root 79u unix 0xcb9e1440 118473 /dev/log
syslog-ng 4464 root 80u unix 0xc3b3c740 118477 /dev/log
syslog-ng 4464 root 81u unix 0xcc3e51c0 116862 /dev/log
syslog-ng 4464 root 82u unix 0xc9f20480 116871 /dev/log
syslog-ng 4464 root 83u unix 0xc301f4c0 118486 /dev/log
syslog-ng 4464 root 84u unix 0xc82023c0 118525 /dev/log
syslog-ng 4464 root 85u unix 0xcb7b68c0 118602 /dev/log
syslog-ng 4464 root 86u unix 0xc420c080 118611 /dev/log
syslog-ng 4464 root 87u unix 0xcd724800 282503 /dev/log
syslog-ng 4464 root 88u unix 0xc9048840 319196 /dev/log
syslog-ng 4464 root 89u unix 0xc2ac4180 119473 /dev/log
syslog-ng 4464 root 90u unix 0xc2ac4500 119492 /dev/log
syslog-ng 4464 root 91u unix 0xc90ac0c0 359394 /dev/log
syslog-ng 4464 root 92u unix 0xcdd99500 359403 /dev/log
syslog-ng 4464 root 93u unix 0xc4570100 412155 /dev/log
syslog-ng 4464 root 94u unix 0xc4efc7c0 389023 /dev/log
syslog-ng 4464 root 95u unix 0xcc2c9800 284370 /dev/log
syslog-ng 4464 root 96u unix 0xca039840 284379 /dev/log
syslog-ng 4464 root 97u unix 0xc33e2c40 376050 /dev/log
syslog-ng 4464 root 98u unix 0xc31204c0 392334 /dev/log
syslog-ng 4464 root 99w REG 3,5 24726 48876 /var/log/secure
syslog-ng 4464 root 100u unix 0xc33e2540 414097 /dev/log
syslog-ng 4464 root 101u unix 0xc723b7c0 414221 /dev/log
syslog-ng 4464 root 102u unix 0xc3b32480 324548 /dev/log
syslog-ng 4464 root 103u unix 0xc5df6ac0 324557 /dev/log
syslog-ng 4464 root 104u unix 0xce13e1c0 401526 /dev/log
syslog-ng 4464 root 105u unix 0xcc22f4c0 401535 /dev/log
syslog-ng 4464 root 106u unix 0xc1db7500 356457 /dev/log
syslog-ng 4464 root 107u unix 0xc9597ac0 356466 /dev/log
syslog-ng 4464 root 108u unix 0xc9443840 401703 /dev/log
syslog-ng 4464 root 109w REG 3,5 387 49004 /var/log/messages
syslog-ng.conf:
options { sync (0);
time_reopen (10);
log_fifo_size (1000);
long_hostnames (off);
use_dns (no);
use_fqdn (no);
create_dirs (no);
keep_hostname (yes);
};
source s_sys { file ("/proc/kmsg" log_prefix("kernel: ")); unix-stream ("/d=
ev/log"); internal(); };
=2E.....
destination d_vpn { file("/var/log/vpn.log"); };
=2E.....
filter f_filter10 { facility(local2) or program(pppd) or program(pptpd)=
or ( facility(kern) and match(PPP) ); };
=2E.....
log { source(s_sys); filter(f_filter10); destination(d_vpn); };
>=20
> --=20
> Bazsi
>=20
>=20
> _______________________________________________
> syslog-ng maillist - syslog-ng@lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
--=20
Andy (ANDY-UANIC)